{"revision":"1acd06960edf46fbae5e305c06ec82d6","evidence":{"cve":"CVE-2026-94127","kev":{"cve":"CVE-2026-94127","product":"BIG-IP APM","name":"F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability","dateAdded":"2026-09-22","dueDate":"2026-09-25","knownRansomwareUse":false,"shortDescription":"F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution.","vendor":"F5","isMicrosoft":false,"products":[],"advisoryUrl":"https://my.f5.com/manage/s/article/K000162605","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94127","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-94127"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"fe19edc23e5100c1de3edebf"}}